AMENDMENTS TO THE CLAIMS 



This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 



1 1 . (Currently amended) A method for sharing a secure communication 

2 session, the method comprising: 

3 establishing a secure socket layer (SSL) session between a client and a 

4 first server, wherein the first server publishes on a database a set of session state 

5 information for the SSL session, and wherein the SSL session state information 

6 includes: 

7 an SSL session identifier; 

8 a read key for encrypting communications from the client; 

9 a write key for encrypting communications from the first server; 

10 an encrypted running message digest; and 

11 a message digest key which is used to encrypt the running message 

12 digest; and 

13 wherein the first server continually changes the running message 

14 digest as messages are sent through the SSL session, and wherein the first server 

15 publishes updates to the running message digest to the database; 

16 receiving a message from the client at a second server, wherein the 

17 message includes the SSL session identifier which identifies the SSL session 

1 8 between the client and the first server , and wherein the second server contains 

19 different content and performs different functions from the first serve r thc client, 

20 the first server, the second server, and the database are different from one another ; 

21 determining that an SSL session corresponding to the received session 
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22 identifier is not configured on the second server; 

23 querying the database with the received SSL session identifier; 

24 retrieving from the database identifier the SSL session state information 

25 which corresponds to the received SSL session identifier and which is published 

26 by the first server;; 

27 establishing an SSL session between the client and the second server with 

28 the same SSL session identifier based on the retrieved SSL session state 

29 information; and 

30 using the running message digest to send a second message from the 

3 1 second server to the client through the SSL session without establishing a separate 

32 SSL session between the client and the second server. 

1 2-8. (Canceled). 

1 9. (Canceled). 

1 10. (Previously presented) The method of claim 1, wherein retrieving the 

2 running message digest includes authenticating and authorizing the first server. 

1 11-12 (Canceled). 

1 13. (Currently amended) A computer-readable storage medium storing 

2 instructions that when executed by a computer cause the computer to perform a 

3 method for sharing a secure communication session, the method comprising: 

4 establishing an SSL session between a client and a first server, wherein the 

5 first server publishes on a database a set of session state information for the SSL 

6 session, and wherein the SSL session state information includes: 

7 an SSL session identifier; 
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8 a read key for encrypting communications from the client; 

9 a write key for encrypting communications from the first server; 

10 an encrypted running message digest; and 

11 a message digest key which is used to encrypt the running message 

12 digest; and 

13 wherein the first server continually changes the running message 

14 digest as messages are sent through the SSL session, and wherein the first server 

15 publishes updates to the running message digest to the database; 

16 receiving a message from the client at a second server, wherein the 

17 message includes the SSL session identifier which identifies the SSL session 

1 8 between the client and the first server , and wherein the second server contains 

19 different content and performs different functions from the first serve rt he client, 

20 the first server, the second server, and the database arc different from one another ; 

21 determining that an SSL session corresponding to the received session 

22 identifier is not configured on the second server; 

23 querying the database with the received SSL session identifier; 

24 retrieving from the database the identifiers SL session state information 

25 which corresponds to the received SSL session identifier and which is published 

26 by the first server; and 

27 establishing an SSL session between the client and the second server with 

28 the same SSL session identifier based on the retrieved SSL session state 

29 information; and 

30 using the running message digest to send a second message from the 

3 1 second server to the client through the SSL session without establishing a separate 

32 SSL session between the client and the second server. 

1 14-20. (Canceled). 
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1 



21. (Canceled). 



1 22. (Previously presented) The computer-readable storage medium of 

2 claim 13, wherein retrieving the running message digest includes authenticating 

3 and authorizing the first server. 

1 23-24 (Canceled). 

1 25. (Currently amended) An apparatus that shares a secure communication 

2 session, comprising: 

3 an establishing mechanism configured to establish an SSL session 

4 between a client and a first server, wherein the first server publishes on a database 

5 a set of session state information for the SSL session, and wherein the SSL 

6 session state information includes: 

7 an SSL session identifier; 

8 a read key for encrypting communications from the client; 

9 a write key for encrypting communications from the first server; 

10 an encrypted running message digest; and 

11 a message digest key which is used to encrypt the running message 

12 digest; and 

13 wherein the first server continually changes the running message 

14 digest as messages are sent through the SSL session, and wherein the first server 

15 publishes updates to the running message digest to the database; 

16 a receiving mechanism configured to receive a message from the client at 

17 a second serve r which identifies the SSL session between the client and the first 

1 8 server , wherein the first message includes the SSL session identifier, and wherein 

19 the second server contains different content and performs different functions from 
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20 the first serve rt ho client, tho first server, tho socond server, and tho database aro 

21 different from one another ; 

22 a determination mechanism configured to determine that an SSL session 

23 corresponding to the received session identifier is not configured on the second 

24 server; 

25 a query mechanism configured to query the database with the received 

26 SSL session identifier; 

27 a retrieving mechanism configured to retrieve from the database identifier 

28 the SSL session state information which corresponds to the received SSL session 

29 identifier and which is published by the first server; 

30 a second establishment mechanism configured to establish an SSL session 

3 1 between the client and the second server with the same SSL session identifier 

32 based on the retrieved SSL session state information; and 

33 a sending mechanism configured to use the running message digest to 

34 send a second message from the second server to the client through the SSL 

35 session without establishing a separate SSL session between the client and the 

36 second server. 

1 26-32. (Canceled) 

1 33. (Previously presented) The apparatus of claim 25, wherein the 

2 retrieving mechanism is configured to authenticate and authorize the first server 

3 prior to retrieving the running message digest. 

1 34-35 (Canceled). 
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